Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
File:                     jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft (raw, json)
Hash identifier:          /nB2+f85TC2mwoo87GeiLHQ/CiwFvEHBye54+GAjM+g=
Subject key identifier:   79:CD:ED:09:FF:07:11:40:C7:94:90:5C:FD:EC:40:E0:D6:B5:36:45
Authority key identifier: 8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18
Certificate issuer:       /CN=8eb045110c41edb25931f4a523c39dd4c941d718
Certificate serial:       019369DA891D374D4EE5152050A719073B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 19:02:29 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:29 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:29 +0000
Files and hashes:         1: RwOMJxZGlKUf52-2VhDhTgffE7w.roa (hash: jBCtRCqKHEvQ+hfKtXHRnTwR74/dHQDINfDr1CrRlTw=)
                          2: jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl (hash: af2BR7hWrJaekyzcfMnlZCL1Bo7xlT7NHWVTf94Xj6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:89:1d:37:4d:4e:e5:15:20:50:a7:19:07:3b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb045110c41edb25931f4a523c39dd4c941d718
        Validity
            Not Before: Nov 26 19:02:29 2024 GMT
            Not After : Nov 27 19:02:29 2024 GMT
        Subject: CN=79cded09ff071140c794905cfdec40e0d6b53645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:d6:f3:92:b2:ee:23:92:02:cd:da:02:9c:
                    bf:0f:99:28:e1:56:d6:9a:d1:ed:c4:54:47:c3:91:
                    a9:75:10:62:a7:6b:92:a5:3b:d3:dd:c5:73:89:77:
                    dd:53:2c:6c:da:eb:42:07:b5:75:60:fa:5f:f7:b9:
                    70:30:51:6b:af:c0:b4:46:b7:4e:fa:23:67:01:09:
                    12:45:81:63:ca:50:65:f9:0f:1d:59:d8:75:fe:bf:
                    ce:9e:fb:2b:bc:bf:28:e5:25:eb:03:4f:0b:3b:a0:
                    ad:be:38:92:b1:ba:70:9a:b9:08:d0:73:b6:e0:7f:
                    a2:f2:79:7b:9d:d5:fb:7a:e5:06:5d:14:09:3a:73:
                    6b:0b:f6:d6:7c:fa:e3:c6:29:18:77:e1:cb:b9:34:
                    fc:be:4f:7b:8e:c0:34:4b:7f:39:f3:8a:8e:49:65:
                    68:12:a4:e6:f9:f9:f0:e2:47:5d:a5:86:a3:fc:9e:
                    59:ff:bf:be:da:80:49:ae:7e:83:19:f4:f2:a6:c8:
                    77:0b:bf:e5:07:d9:a6:96:dd:9b:43:6b:59:5d:af:
                    12:9f:42:9f:f4:5c:28:75:03:6c:32:7b:cc:41:d9:
                    24:39:f6:1f:8d:4b:e3:d9:6c:8f:fb:a4:43:17:b4:
                    1d:71:45:56:e7:85:d8:c3:7e:3b:81:02:d0:98:37:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CD:ED:09:FF:07:11:40:C7:94:90:5C:FD:EC:40:E0:D6:B5:36:45
            X509v3 Authority Key Identifier:
                keyid:8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:65:84:d9:a7:c0:53:33:57:4b:c6:9c:30:32:5b:0a:b1:
         8f:58:a7:10:61:84:9f:b6:b4:62:e2:7b:1d:d1:c4:34:d7:ab:
         a2:03:4f:1d:46:e3:9c:41:c3:d0:31:da:66:19:d8:ab:5b:85:
         73:ca:cf:1e:04:ce:be:ee:0e:8c:94:f8:66:c2:c9:11:ec:3d:
         0b:42:47:60:20:4b:ae:36:0d:ea:03:a8:23:7a:59:bb:3c:6c:
         a5:6d:c6:15:5c:4f:b8:d9:4a:57:ae:6e:0b:b7:b4:48:3a:0d:
         bd:dd:13:c1:c6:66:9d:34:a1:ff:61:f0:6c:12:c6:4e:e8:a1:
         37:81:0b:a7:47:3d:53:d0:4a:9b:ca:54:5b:c0:e1:ed:a3:08:
         a1:8b:ed:c1:fb:22:e7:1c:bd:69:22:5a:e2:ec:10:87:a1:7f:
         df:01:30:74:4a:3a:4d:66:9e:10:15:f0:b5:0a:93:c7:50:1a:
         b3:44:bd:09:f3:9a:29:5b:53:c0:7b:c9:28:05:68:da:a8:87:
         b7:5e:47:c6:9c:ef:51:50:db:d8:73:c4:d6:98:95:ed:04:f0:
         dc:f5:27:31:60:eb:7d:4f:c8:0e:fd:d0:77:a7:b1:a3:05:f2:
         09:0f:0a:37:1d:0e:31:8e:6c:9d:70:12:e8:3e:94:00:44:aa:
         08:76:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:36 2024 by rpki-client on console-ams.rpki-client.org